Very easy to get up, very simple rules that can be used in all kinds of scenarios (we are using it as ingress controller).
It's been quite some time since I started working at this project but from what people told me when we had an issue they were able solve or point us into right direction without any effort required by our side was great! Nothing really - maybe just one thing which would require more documentation about how exactly does ciclum behave under certain conditions could have helped better understanding their product so far. We use CI lite mostly because there aren't much other options available out-of box regarding security/iptables stuffs like CISCO products do provide nowdays :).